zzm

For those who are interested in more details about this, I wrote a paper that examines the delay and trust discrepancies between Mozilla and its derivative root stores (e.g., Linux, NodeJS, etc.): https://zanema.com/papers/imc21_roots.pdf

As others in this thread have stated, security questions are less secure than using a password, and thus, a poor way backup to passwords.

One interesting alternative that's been presented recently is Mooney Images [1]. The example images in the linked slides are fun to test out on yourself and others. They rely on a user's implicit memory of visual imagery and while they are also susceptible to similar sorts of side-channel inquiries, they would be much more obvious.

[1] https://www.mobsec.rub.de/media/mobsec/veroeffentlichungen/2...

We recently published a paper on this exact issue and quantify the degree to which AV / corporate middlebox systems degrade the security of HTTPS connections. The tl;dr is that we find an alarming amount of MITM on the public internet (5-10%), mostly due to AV/middleboxes, and they almost always degrade the security of the connection.

*https://jhalderm.com/pub/papers/interception-ndss17.pdf

For those who have been using this - how is the pricing? The reason I ask is that I don't see how Google can make money (especially with free shipping for 6 months) without putting a markup on items. Perhaps they are just trying to gain traction and are willing to bite the bullet for the first 6 months.

I did a quick comparison between a random product: LG 42" Class 1080p 60Hz LED HDTV. Target's direct online store offers the TV for $379, while Google Shopping has it listed for $449.99. I haven't done other comparisons, but this seems to confirm my belief that Google is marking the products up to some extent.

Looks like a big jump between 1940-1950 due to the gold rush, I imagine a similar jump will probably be seen for 2010-2020